Privacy Policy

General information and scope

This privacy policy informs you about the nature, scope and purpose of the processing of personal data when you use our website https://airportdriver.at/ and our services (airport transfers, limousine service).

Controller

AD AirportDriver.at Service GmbH
Johnstraße 4/7, 1150 Vienna, Austria
Phone: +43 (0)1 22 8 22
E-mail: datenschutz@airportdriver.at

Please send all data protection enquiries to the e-mail address above.

Your rights as a data subject

As a data subject, you have extensive rights regarding the processing of your personal data at any time.

You have the right of access (Art. 15 GDPR) to the data stored about you. You have the right to rectification (Art. 16 GDPR) of inaccurate data and the right to erasure (“right to be forgotten”, Art. 17 GDPR) if the data is no longer necessary or the processing is unlawful. You also have the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You have the right to object (Art. 21 GDPR) to processing based on legitimate interests, in particular to processing for direct marketing purposes.
Without prejudice to any other remedy, you have the right to lodge a complaint (Art. 77 GDPR) with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde, DSB).

Storage period of personal data

We only store your data for as long as necessary to achieve the respective purpose of processing or as required by statutory retention periods.

Data from website use (log files) is generally stored for seven days only, to ensure technical security. Contract and billing data (bookings, invoices) is stored for seven years from the end of the calendar year in which the document was created, due to retention obligations under Austrian commercial and tax law (UGB and BAO). Data based on your consent is stored until you withdraw your consent and is then deleted. In the event of ongoing legal disputes, we store relevant data until the proceedings have been concluded.

Technical and organisational security measures (TOMs)

We use appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your data against unauthorised access, loss or destruction. These include SSL/TLS encryption of our website, protected access controls to our systems, regular data backups and the confidentiality obligation and training of our staff.

Processing activities of the website and services in detail

Provision of the website, hosting and log files

Purpose: Ensuring the technical stability, operation and security of our website (protection against cyber attacks). Data: IP address, time of access, page accessed, browser data. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in secure and trouble-free operation.
Hosting: Our website is hosted by easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria. The provider processes the data as a processor on the basis of a data processing agreement (Art. 28 GDPR).

Booking and performance of transfers (performance of contract)

Purpose: Performance of the transport contract (airport transfers, limousine service, major events). Data: Name, e-mail address, phone number, pick-up and destination address, pick-up date and time, class (Economy/Business), flight number, regular customer login data where applicable, payment data.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Recipients: Your booking data is processed in our internal dispatch system and passed on to the assigned chauffeur to carry out the ride.

Payment processing

Purpose: Processing online payments for your booking. Data: Name, invoice amount, booking number, payment method and the payment data required for the payment. We do not store complete credit card data ourselves.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR). No consent to cookies is required for the payment.
Recipients: If you use Apple Pay or Google Pay, the payment data is processed via Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Their privacy policies also apply.

Contacting us

Purpose: Answering your enquiries by e-mail or phone. Data: Name, contact details, content of the message.
Legal basis: Pre-contractual measures (Art. 6(1)(b) GDPR) for booking enquiries or legitimate interest (Art. 6(1)(f) GDPR) for general enquiries.

Cookies, analytics and tracking (Section 165 TKG 2021)

We use cookies, pixels and similar technologies to process information on your device.

Strictly necessary cookies: These are essential to provide the services you have requested (e.g. storing your booking entries during the booking process, login session, storing your cookie choice). No consent is required for these (Section 165(3) TKG 2021, Austrian Telecommunications Act).
Analytics, statistics and advertising cookies: For all purposes that are not strictly necessary, such as statistical analysis of website use and the integration of third-party advertising services, we obtain your active consent. Processing is based on your consent (Art. 6(1)(a) GDPR in conjunction with Section 165(1) TKG 2021). You can withdraw your consent at any time in the cookie settings.

Services for which we obtain your consent:
Analytics and statistics: Meta Pixel, Google Tag Manager, Google Signals, Google Analytics 4, Google Ads Optimization
Advertising: Google Ads Remarketing, Google Ads Conversion Tracking
External content: Google Maps
The services are described below.

Consent management (CCM19)

Nature and purpose of processing: For cookies and services that are not strictly necessary, we obtain your consent via a cookie banner. Your choice is stored so that we can respect and document it.

Provider: CCM19 by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. The data is stored on servers in Germany. The provider acts as a processor (Art. 28 GDPR).

Categories of data: Your choice (button clicked, consent status), date of consent and of the last change, permitted scripts, cookies and embedded content, banner language and a random identifier (UCID).

Legal basis for processing: Compliance with the legal obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Storing your choice in your browser is strictly necessary (Section 165(3) TKG 2021).

Storage period: Your choice is stored for 12 months, after which you will be asked again. We keep records of consent for 3 years.

Transfer to third countries: No data is transferred to countries outside the EEA.

Withdrawal of consent: You can change your choice at any time via the cookie settings on our website.

Google LLC

Nature and purpose of processing: Google LLC uses cookies, web storage and similar tracking technologies to analyse user behaviour, display personalised advertising and ensure the technical delivery of content via CDNs. This includes collecting and analysing information about websites visited, services used, ads displayed and clicked, and technical usage data in order to measure the effectiveness of advertising campaigns. Payments via Google Pay are separate from this (see “Payment processing”).

Legal basis for processing: Processing is carried out exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR).

Categories of data: In particular, the following categories of data are processed: online identifiers (e.g. cookie IDs, device identifiers), IP addresses, usage data (e.g. time spent, interactions), geographical location data (where enabled) and information about the devices and browsers used.

Recipients: The recipient of the data is Google LLC and, where applicable, affiliated companies within the Google group and advertising partners within the scope of the services.

Storage period: The storage period of the cookies and tracking technologies used varies by type: some are deleted at the end of the session (session cookies), others remain on your device for several months to years, depending on your browser and the specific cookie settings (usually 6 to 24 months).

Statutory or contractual requirement: Providing your data via cookies, web storage and tracking technologies is not required by law or contract. However, it is technically necessary for using specific functions provided by Google.

Transfer to third countries: Google LLC also processes data in the USA. Google is certified under the EU-U.S. Data Privacy Framework. For certified companies, an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, the Standard Contractual Clauses of the European Commission apply (Art. 46(2)(c) GDPR).

Withdrawal of consent: You can withdraw your consent at any time with effect for the future by adjusting the cookie settings on our website or by deleting stored cookies and web storage entries in your browser.

Automated decision-making and profiling: The tracking technologies used carry out automated analyses and profiling, for example to display targeted advertising or personalise content. No further automated decision-making within the meaning of Art. 22 GDPR takes place.

Google Tag Manager

Nature and purpose of processing: Google Tag Manager is a tag management system that allows tracking codes and scripts (tags) to be integrated and controlled centrally on the website. Google Tag Manager itself does not set any cookies and does not store any personal data. It is used to manage and trigger marketing and analytics functions. Via the Tag Manager, cookies and tracking technologies of third-party providers (e.g. Google Analytics, conversion tracking) can in turn be integrated and triggered.

Legal basis for processing: Google Tag Manager and the tracking and marketing technologies linked to it are integrated on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Categories of data: If downstream tags are activated, the following data may be processed: IP address, browser information, device information, cookie IDs, user preferences, page views, time spent, interactions and, depending on the configuration of the integrated tags, other pseudonymous or personally identifiable usage data.

Recipients: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and where applicable the providers of the tracking and marketing services loaded by Google Tag Manager.

Storage period: Google Tag Manager itself does not store any personal data. Personal data is stored and deleted exclusively in accordance with the settings and storage periods of the services controlled by the Tag Manager.

Statutory or contractual requirement: Providing and using Google Tag Manager and downstream tracking technologies is neither required by law nor by contract and is not necessary for concluding a contract.

Withdrawal of consent: You can withdraw your consent to the use of Google Tag Manager and the tracking and marketing technologies integrated with it at any time with effect for the future, for example via the cookie settings on this website.

Automated decision-making and profiling: Google Tag Manager itself does not carry out any automated decision-making or profiling. If integrated tags use such technologies, this is done exclusively within the controlled services and on the basis of your prior consent.

Use of Google Analytics

Nature and purpose of processing: This website uses cookies, web storage and tracking technologies through the Google Analytics service (google-analytics.com). These collect information about user behaviour on the website, e.g. pages visited, interactions, session duration, traffic source, device and browser data and approximate geographical location. The data is aggregated and analysed in order to measure reach, carry out statistical evaluations, optimise marketing campaigns and improve the user experience.

Legal basis for processing: Processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.

Categories of data: Data collected includes online identifiers (e.g. cookie IDs, device IDs), shortened IP addresses, device and browser specifications, interaction data, referrer URLs and usage statistics on website use.

Recipients: The recipient of the data collected by Google Analytics is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Storage period: The cookies and web storage objects set can be stored on your device for up to 2 years. Usage data stored by Google is kept for 14 months.

Statutory or contractual requirement: Providing this information via cookies and tracking technologies is neither required by law nor by contract and is not strictly necessary for operating the website.

Withdrawal of consent: You can withdraw your consent to the use of Google Analytics at any time via the cookie settings on the website or by deleting the cookies. Further settings are available in the privacy settings of your browser.
Automated decision-making and profiling: Tracking technologies can be used to create a pseudonymous usage profile. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Use of Google Maps

Nature and purpose of processing: By integrating Google Maps (maps.googleapis.com), map content from Google is displayed on the website. For this purpose, Google sets cookies and uses web storage and tracking technologies to deliver content efficiently, store usage preferences, improve performance and prevent misuse. These technologies also allow Google to compile usage statistics, analyse user behaviour and adapt the map display to your interests.

Legal basis for processing: Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Categories of data: Data processed includes in particular IP address, device information, browser information, referrer URL, subpages visited, interactions with the map, date and time of access and cookie and web storage IDs.

Recipients: The recipient of the data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Access by subsidiaries and affiliated companies of Google is also possible.

Storage period: The storage period of cookies and web storage information varies by type: session cookies are deleted immediately at the end of the session, persistent cookies and similar technologies remain in some cases for up to 2 years or until you actively delete them.

Statutory or contractual requirement: Providing your data is neither required by law nor by contract and is not necessary for concluding a contract. Google Maps is used exclusively on a voluntary basis after your consent.

Withdrawal of consent: You can withdraw your consent to the processing of your data by Google Maps at any time with effect for the future, for example by deleting the relevant cookies in your browser or by refusing in the consent management.

Automated decision-making and profiling: When the embedded map services are used, Google may carry out automated analyses and profiling in order to display personalised content and advertising.

Use of Google Signals

Nature and purpose of processing: Google Signals is an extension of Google Analytics 4. If you have enabled personalised advertising in your Google account, Google can analyse your use of our website across devices (e.g. visit on a smartphone, booking on a computer). We only receive aggregated reports from which no individual persons can be identified.

Legal basis for processing: Processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.

Categories of data: Online identifiers (e.g. cookie IDs), usage data (pages visited, interactions), device and browser information and the link to your Google account if you are signed in.

Recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Storage period: As with Google Analytics, the data is kept for 14 months.

Statutory or contractual requirement: Providing this data is neither required by law nor by contract and is not necessary for concluding a contract.

Withdrawal of consent: You can withdraw your consent at any time via the cookie settings on our website. You can also deactivate cross-device analysis in your Google account settings under “My Ad Center”.

Automated decision-making and profiling: Google creates cross-device, pseudonymous usage profiles. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Use of Google Ads

Nature and purpose of processing: We use Google Ads with the following functions: Conversion Tracking measures whether you complete a booking after clicking on one of our ads. Remarketing allows us to show relevant ads to visitors of our website on other websites and in Google services. Google Ads Optimization uses this data to automatically improve the delivery and bidding of our campaigns.

Legal basis for processing: Processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(1) TKG 2021.

Categories of data: Online identifiers (e.g. cookie IDs, ad click identifier), shortened IP address, device and browser information, pages visited, conversion events (e.g. completed booking) and date and time.

Recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Storage period: Depending on their type, Google Ads cookies are stored on your device for between 90 days and 13 months. Remarketing lists are kept for a maximum of 540 days.

Statutory or contractual requirement: Providing this data is neither required by law nor by contract and is not necessary for concluding a contract.

Withdrawal of consent: You can withdraw your consent at any time with effect for the future via the cookie settings on our website. You can also deactivate personalised advertising at adssettings.google.com.

Automated decision-making and profiling: Pseudonymous usage profiles are created for remarketing and campaign optimisation. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Use of Meta Pixel

Nature and purpose of processing: We use the Meta Pixel from Meta. It allows us to measure how effective our ads on Facebook and Instagram are (e.g. whether a booking is made after clicking on an ad), to build target audiences for our advertising and to show relevant ads on Facebook and Instagram to visitors of our website.

Legal basis for processing: Processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 165(1) TKG 2021.

Joint controllership: We are jointly responsible with Meta Platforms Ireland Limited for collecting the data on our website and transmitting it to Meta (Art. 26 GDPR). The corresponding agreement is available at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing. You can also exercise your rights directly with Meta.

Categories of data: Online identifiers (e.g. cookie IDs), IP address, device and browser information, pages visited, referrer URL, events on our website (e.g. completed booking) and date and time. If you are logged in to Facebook or Instagram, Meta can link this data to your account.

Recipients: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, and Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA.

Storage period: The Meta Pixel cookie is stored on your device for up to 90 days. How long Meta stores the data is governed by Meta’s privacy policy.

Statutory or contractual requirement: Providing this data is neither required by law nor by contract and is not necessary for concluding a contract.

Transfer to third countries: Meta Platforms, Inc. also processes data in the USA. Meta is certified under the EU-U.S. Data Privacy Framework. For certified companies, an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, the Standard Contractual Clauses of the European Commission apply (Art. 46(2)(c) GDPR).

Withdrawal of consent: You can withdraw your consent at any time with effect for the future via the cookie settings on our website. You can also restrict personalised advertising in the ad settings of your Facebook or Instagram account.

Automated decision-making and profiling: Meta uses the data to create usage profiles in order to deliver targeted advertising. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Data transfer to third countries (USA)

When analytics, statistics and advertising services (e.g. Google services, Meta Pixel) are used, personal data may be transferred to the USA. We only use providers certified under the EU-U.S. Data Privacy Framework; for these, an adequacy decision of the European Commission applies (Art. 45 GDPR).

Transfer safeguards: In addition, we base the transfer on the Standard Contractual Clauses (SCC) adopted by the European Commission (Art. 46(2)(c) GDPR). Data is only transferred if you have consented to the respective services.

Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. We will inform you of significant changes, for example by a prominent notice on our website. The version available at the time of your visit applies.

Version of this privacy policy: November 2026

This is a translation of the German privacy policy (Datenschutzerklärung). In case of discrepancies, the German version shall prevail.